القائمة
插件根目录定位协议。在命令执行前自动触发，确定 resource/、scripts/、references/ 等目录的绝对路径。
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Orchestrates the full pipeline of finding, analyzing, and extracting reusable modules from open-source GitHub repositories. 6 phases: demand → search → analyze → depgraph → extract → market. Each phase backed by a dedicated skill with its own methodology. Triggers: 开源复用, 模块提取, repo分析, 代码移植, 找开源库, github筛选, 依赖图
Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files). Triggers include: any mention of "Word doc", "word document", ".docx", or requests to produce professional documents with formatting like tables of contents, headings, page numbers, or letterheads. Also use when extracting or reorganizing content from .docx files, inserting or replacing images in documents, performing find-and-replace in Word files, working with tracked changes or comments, or converting content into a polished Word document. If the user asks for a "report", "memo", "letter", "template", or similar deliverable as a Word or .docx file, use this skill. Do NOT use for PDFs, spreadsheets, Google Docs, or general coding tasks unrelated to document generation.
Use this skill any time a .pptx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx file (even if the extracted content will be used elsewhere, like in an email or summary); editing, modifying, or updating existing presentations; combining or splitting slide files; working with templates, layouts, speaker notes, or comments. Trigger whenever the user mentions "deck," "slides," "presentation," or references a .pptx filename, regardless of what they plan to do with the content afterward. If a .pptx file needs to be opened, created, or touched, use this skill.
Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .csv, or .tsv file (e.g., adding columns, computing formulas, formatting, charting, cleaning messy data); create a new spreadsheet from scratch or from other data sources; or convert between tabular file formats. Trigger especially when the user references a spreadsheet file by name or path — even casually (like "the xlsx in my downloads") — and wants something done to it or produced from it. Also trigger for cleaning or restructuring messy tabular data files (malformed rows, misplaced headers, junk data) into proper spreadsheets. The deliverable must be a spreadsheet file. Do NOT trigger when the primary deliverable is a Word document, HTML report, standalone Python script, database pipeline, or Google Sheets API integration, even if tabular data is involved.
金融数据智能检索。根据用户的自然语言描述，自动识别需要的数据接口， 查阅 API 文档，构造请求并返回数据。覆盖股票、指数、期货、债券、 基金、宏观经济等 15 大类 209 个接口。 触发词：查行情、看股票、财务数据、基金净值、期货行情、宏观数据、 涨停股、龙虎榜、资金流向、利率、CPI、GDP、可转债、ETF、港股、美股。
Tools for building modern React webapps with TypeScript, Tailwind CSS and shadcn/ui. Best suited for applications with complex UI components and state management.
| name | plugin-root-resolution |
| description | 插件根目录定位协议。在命令执行前自动触发，确定 resource/、scripts/、references/ 等目录的绝对路径。 |
按以下优先级，命中即停：
| 优先级 | 来源 | 说明 |
|---|---|---|
| 1 | YD_CODEBUDDY_PLUGIN_ROOT | 自定义/内测插件路径，优先使用 |
| 2 | CODEBUDDY_PLUGIN_ROOT | 官方插件路径 |
| 3 | 兜底 | ~/.codebuddy/plugins/marketplaces/codebuddy-plugins-official/plugins/security-scan/ |
不要一次性执行多行脚本（按以下顺序逐条执行单行命令，命中即停：
echo "${YD_CODEBUDDY_PLUGIN_ROOT:-EMPTY}" && [ -d "${YD_CODEBUDDY_PLUGIN_ROOT:-/nonexistent}/resource" ] && echo "OK" || echo "SKIP"
OK → plugin_root = 该路径，停止，不执行后续步骤SKIP → 继续步骤 2echo "${CODEBUDDY_PLUGIN_ROOT:-EMPTY}" && [ -d "${CODEBUDDY_PLUGIN_ROOT:-/nonexistent}/resource" ] && echo "OK" || echo "SKIP"
OK → plugin_root = 该路径，停止SKIP → 继续步骤 3[ -d "$HOME/.codebuddy/plugins/marketplaces/codebuddy-plugins-official/plugins/security-scan/resource" ] && echo "$HOME/.codebuddy/plugins/marketplaces/codebuddy-plugins-official/plugins/security-scan OK" || echo "SKIP"
OK → plugin_root = 该路径SKIP → 三级都未命中，以无资源模式继续执行plugin_root，以下子目录可用：
$plugin_root/resource/ — 规则、配置等 YAML 资源$plugin_root/scripts/ — 可执行脚本$plugin_root/references/ — 编排器参考文档（orchestrator-rules、lsp-setup 等）plugin_root 的步骤，继续执行扫描命令中出现的 references/xxx.md 引用，实际路径为 $plugin_root/references/xxx.md。
plugin_root 存在时：
$plugin_root/... 绝对路径前缀glob("**/security-scan/...")）